From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([208.118.235.92]:53085) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1UVqxb-0003n1-8H for qemu-devel@nongnu.org; Fri, 26 Apr 2013 18:17:45 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1UVqxa-0004cm-B0 for qemu-devel@nongnu.org; Fri, 26 Apr 2013 18:17:43 -0400 Received: from mail-ee0-f45.google.com ([74.125.83.45]:48873) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1UVqxa-0004ci-4g for qemu-devel@nongnu.org; Fri, 26 Apr 2013 18:17:42 -0400 Received: by mail-ee0-f45.google.com with SMTP id l10so1855479eei.4 for ; Fri, 26 Apr 2013 15:17:41 -0700 (PDT) Sender: Paolo Bonzini Message-ID: <517AFCFA.1020407@redhat.com> Date: Sat, 27 Apr 2013 00:17:30 +0200 From: Paolo Bonzini MIME-Version: 1.0 References: <517AC9E5.3050204@linux.vnet.ibm.com> <7515044.dYPbKXmJQB@sifl> In-Reply-To: <7515044.dYPbKXmJQB@sifl> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Subject: Re: [Qemu-devel] [RFC] Continuous work on sandboxing List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Paul Moore Cc: qemu-devel@nongnu.org, Eric Paris , Eduardo Otubo Il 26/04/2013 23:07, Paul Moore ha scritto: >> > 3. Debugging and/or learning mode - third party libraries still have the >> > problem of interfering in the Qemu's signal mask. According to some >> > previous discussions, perhaps patch all external libraries that mass up >> > with this mask (spice, for example) is a way to solve it. But not sure >> > if it worth the time spent. Would like to hear you guys. > I think patching all the libraries is a losing battle, I think we need to > pursue alternate debugging techniques. It is really only about patching libraries that create threads _and_ block all signals in the newly-created thread (to not interfere with the program's own handling of the signals). In this case, the per-thread signals (SIGFPE/SIGSEGV/SIGBUS/SIGSYS/SIGILL) should be left unblocked, but SIGSYS is often forgotten. I don't think there are many libraries like this, but fixing SPICE at least should definitely be welcome. In fact QEMU's own util/qemu-thread-posix.c does not unblock those signals. Eduardo, can you submit a patch for that? Paolo